Tkfiles

tkfiles

Vendor: Takes • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2025-66905

1Takes

1Tkfiles

Jun 17, 2026

Dec 19, 2025

N/A· v4

7.5 HIGH· v3

N/A· v2

The Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths before resolving them against the filesystem. A remote attacker can include ../ sequences in the request path to escape th...Show more